Bidirectional Access Visualization for Enterprise Network Security
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Current access permissions management systems lack effective bi-directional visualization and monitoring of user authority over network objects, such as computers and printers, within enterprise-wide networks, which complicates the management and reporting of access rights.
Innovation Solution
A system and method for providing bi-directional visualization and monitoring of user authority over SACs (containers including network objects) in an enterprise-wide network, allowing user-wise and SAC-wise visualization and reporting of authority, enabling IT managers to track and manage access permissions efficiently.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Loss of information
If traditional access permissions management systems are used, then basic access control is maintained, but bi-directional visualization and monitoring of user authority over network objects is ineffective
Solution Approach 1:
The system segments the visualization of user authority into two distinct bidirectional views: user-wise visualization (showing which SACs a user has authority over) and SAC-wise visualization (showing which users have authority over a given SAC). This segmentation allows comprehensive monitoring to be achieved through structured, manageable perspectives rather than a single complex overview.
Solution Approach 2:
The patent introduces a bidirectional dimension to the traditional unidirectional access control model. By adding the reverse perspective (SAC to user authority mapping), the system creates a two-dimensional visualization framework that enables comprehensive monitoring without overwhelming complexity in a single view.
2Reliability
If comprehensive monitoring of user authority is implemented, then security and management are enhanced, but system complexity increases
Solution Approach 1:
The system implements feedback mechanisms through the bidirectional visualization and monitoring capabilities. The user-wise and SAC-wise views provide continuous feedback about authority relationships, enabling real-time detection of access issues and informing security management decisions without requiring overly complex automated response systems.
Solution Approach 2:
The patent introduces visualization and monitoring functionality as an intermediary layer between the access control system and security management. This intermediary provides comprehensive authority information through structured views, enabling effective security management without directly increasing the core access control system's complexity.
3Ease of operation
If bi-directional visualization functionality is added, then access permissions management is improved, but device complexity increases
Solution Approach 1:
The bidirectional visualization system serves multiple functions simultaneously: it provides user authority overview, SAC authority overview, monitoring capabilities, and reporting functionality. By consolidating these functions into a unified bidirectional framework, the system improves ease of operation across multiple management tasks without proportionally increasing complexity.
Data Source
AI summary
A system for providing bi-directional visualization of authority of users over SACs in an enterprise-wide network, the system including functionality for providing user-wise visualization of the authority of a given user over at least one SAC in respect of which the user has authority, and functionality for providing SAC-wise visualization for a given SAC of the authority of at least one user over the given SAC.